XiaoPai Player Control

Control XiaoPai media player over LAN via HTTP/TCP. Use when asked to play videos, send remote-control keys, adjust volume, or query playback status on a Xia...

This skill is coherent for local LAN control of a XiaoPai player, but review these before installing: (1) The included script expects dns-sd/avahi, curl, nc, and python3/zeroconf for discovery — install only the tools you trust; the registry metadata did not list these required binaries. (2) Commands are sent over your LAN to the device IP — only use it with devices you trust and get explicit consent before sending destructive commands (e.g., RBT / reboot). (3) Inspect the helper script before running it (it uses curl/nc to contact devices). (4) If you are on an untrusted network, avoid running mDNS discovery or automatic discovery to reduce exposure. Overall the skill looks legitimate for its purpose, but the small metadata vs. instruction mismatch and local-network scanning behavior warrant a quick manual review before use.

Type: OpenClaw Skill Name: xiaopai-player-control Version: 1.1.0 The xiaopai-player-control skill is a legitimate tool for controlling XiaoPai media players over a local network via HTTP and TCP. The skill includes well-documented instructions in SKILL.md and a helper script (xiaopai-ctl.sh) that uses standard tools like curl, nc, and mDNS for discovery. The code follows good practices, such as using proper quoting in shell scripts to prevent injection and providing user-facing warnings for destructive commands like rebooting (RBT). No evidence of malicious intent, data exfiltration, or unauthorized access was found.